Peter Steinberger
801ec63f92
refactor(cli): rely on Commander contracts ( #106366 )
2026-07-13 05:05:31 -07:00
qingminlong
c5aa7397b4
fix(nodes): reject malformed camera content lengths ( #105954 )
2026-07-13 04:42:21 -07:00
Peter Steinberger
d262cad41f
refactor: burn down Matrix, Telegram, and outbound dead exports ( #106153 )
...
* refactor(matrix): remove unused internal exports
* refactor(telegram): remove unused internal exports
* refactor(matrix): remove stale thread binding imports
* refactor(outbound): remove unused internal exports
* style(outbound): format dead export cleanup
2026-07-13 04:39:58 -07:00
Peter Steinberger
faef57e138
fix(ci): repair suspension lane lint errors and stale deadcode entry
2026-07-13 04:18:07 -07:00
Peter Steinberger
9086389527
feat(control-ui): agent identity editor, Settings-homed Agents page, scalable chip switcher ( #106058 )
...
* feat(control-ui): agent identity editor, settings-homed agents page, chip switcher pinning
* test(control-ui): pinned-agent persistence coverage; persist pins only when set
* refactor(control-ui): split agent menu, identity actions, model staging out of oversized files
* chore(i18n): sync control-ui locale bundles for agent identity/switcher keys
* fix(control-ui): stabilize new sidebar switcher tests; ratchet LOC + export baselines
* chore(review): document identity clear limitation; drop unused export
* feat(control-ui): scope pages to selected agent
* fix(control-ui): keep scoped page state consistent
* docs(control-ui): explain shared agent scope
* fix(control-ui): reconcile agent scope with current ui
* fix(control-ui): preserve complete agent filtering
* fix(control-ui): bound uploaded agent avatars
* test(control-ui): keep pinned-route fixture valid
* test(control-ui): keep pinned-route fixture valid
* chore(i18n): sync locale bundles for agent scoping keys
2026-07-13 04:03:26 -07:00
Peter Steinberger
4dd839c462
refactor(release): split cross-os checks ( #106309 )
2026-07-13 04:01:40 -07:00
Ho Lim
b00ff778b8
fix(gateway): clear session suspension timers on shutdown ( #103211 )
...
Improve gateway session suspension shutdown handling.
Co-authored-by: Ho Lim <subhoya@gmail.com >
2026-07-13 03:53:24 -07:00
Ayaan Zaidi
745ab05e6f
fix(gateway): drain parked restart emit hooks on hooked emissions
...
A gateway-tool restart parks sentinel/continuation hooks in
pendingRestartEmitHooks, but emitPreparedGatewayRestartUnderAdmission only
drained them when emitting hookless. When the config-reload deferral won the
emission race with its own emitHooks, the restart sentinel was never written:
no post-restart notice, no continuation turn, stale pendingRestartSessionKey
surviving in-process restarts, and orphaned hooks never rejected.
Run the caller preflight first, then drain parked hooks with the original
replace/reject loop whose tail re-read also captures hooks accepted while the
caller's beforeEmit awaited; release session ownership only once the slot is
settled and no awaits remain before emission. Reject every prepared hook set
on non-emitted outcomes and error-isolate afterEmitFailed callbacks. The
empty-slot path stays await-free so mid-flight intent/deferral timing is
unchanged, and emission attempts remain single-flight behind the restart-signal
admission fence (now documented).
Fixes #106138
2026-07-13 16:23:04 +05:30
Peter Steinberger
eb1120feee
test(worker): deterministically gate the lost-window replay scenario
...
Post-merge review of #105921 flagged a synchronization race: the restart
fault fired before the pre-restart tail live event was guaranteed to
reach the gateway, making the replay trace assertion timing-dependent.
Pin the pre-restart prefix with vi.waitFor and assert the lost-window
invariants (resync replay renumbered from the fresh ack state) instead
of the exact retry trace, which legitimately varies with the ack/teardown
race. 5x stable locally.
2026-07-13 03:47:31 -07:00
Peter Steinberger
8ba5cd3070
refactor(agents): trim exec approval exports ( #106292 )
2026-07-13 03:43:45 -07:00
Peter Steinberger
0e520d68e7
fix(ci): stabilize runtime test retries
2026-07-13 11:41:15 +01:00
Peter Steinberger
a17058d191
feat(usage): show the account email with plan windows in the chat context popover ( #106200 )
...
* feat(usage): surface plan windows and account email in the chat context popover
The context-window popover now shows which account a session runs on:
provider usage snapshots carry an accountEmail resolved from the auth
profile when stored, the ChatGPT access-token JWT claims (openai/codex),
or the Claude CLI config file (~/.claude.json oauthAccount) for
keychain-synced logins. models.authStatus embeds it, quota groups keep
distinct accounts separate, and the popover renders the email under the
plan header for local CLI sessions and OpenClaw-configured subscriptions
alike.
* test(openai): assemble the fake usage JWT from parts
* test(usage): keep fixture tokens and identity plumbing scanner-safe
* fix(usage): verify the Claude CLI login before labeling usage with its email
Review findings: the CLI-config email fallback now requires the usage token
to match the cached CLI credential (and honors CLAUDE_CONFIG_DIR), so an
ambient login for another account never labels a snapshot; token-type
credentials propagate their stored email alongside oauth ones.
* style(anthropic): scanner-safe local for the CLI login read
* fix(usage): capture the Claude CLI account email on the credential
Review findings: reading ambient CLI config at usage-fetch time could not
verify keychain-only logins and could go stale across account switches.
The credential reader now captures oauthAccount.emailAddress next to the
credential it belongs to, the synced claude-cli profile carries it, and
the anthropic fetcher uses only the credential-borne identity.
* style(usage): scanner-safe credential fixtures and helper naming
* fix(auth): backfill the CLI account email onto existing synced profiles
Profiles synced before identity capture stay usable and skip CLI reads,
so upgraded installs would never gain the email until token rotation.
While the stored token material matches the CLI login, merge the
non-secret email onto the stored profile.
* style(test): scanner-safe email assertion
* test(auth): pin the no-reread invariant to identity-complete profiles
2026-07-13 03:39:16 -07:00
Peter Steinberger
b9411fda36
test(plugins): restore removed regression coverage ( #106269 )
2026-07-13 03:34:46 -07:00
Peter Steinberger
9857f05b74
fix(ci): drop stale gateway-lock deadcode entries
2026-07-13 03:28:56 -07:00
Arca
0e5ed900b0
fix(discord): retry stale preview cleanup after final delivery ( #104893 )
...
* fix(discord): retry stale preview cleanup
* test(channels): use compatible deferred helper
* test(channels): satisfy deferred lint
* chore: prepare Discord preview cleanup
* fix(channels): retain failed draft cleanup targets
* fix(channels): separate draft cleanup callbacks
* fix(channels): claim standalone draft cleanup ids
---------
Co-authored-by: Cad from Arca <cad@arcabot.ai >
Co-authored-by: Colin <colin@solvely.net >
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-13 03:23:27 -07:00
Peter Steinberger
ca0fe7f691
refactor(agents): trim subagent spawn exports ( #106275 )
2026-07-13 03:22:12 -07:00
Peter Steinberger
2aa4ff0825
refactor: consolidate duplicate helper exports ( #106016 )
...
* refactor(normalization): consolidate string helpers
* refactor(normalization): consolidate agent ids
* refactor(paths): consolidate user path resolution
* refactor(gateway): preserve transcript helper facade
* fix(normalization): align helper build aliases
* fix(memory): keep helper import line neutral
* chore(plugin-sdk): align consolidated helper surface
* refactor(normalization): reuse lowercase string helper
* refactor(normalization): reuse record guard
* refactor(normalization): share surrogate boundary helper
* refactor(agents): share token estimate constant
* refactor(memory): distinguish standalone helper contracts
* refactor(normalization): share error cause formatter
* refactor(config): distinguish eligibility predicates
* refactor(plugins): share registry state symbol
* refactor(cli): reuse outbound dependency adapter
* refactor(cron): distinguish positive duration parser
* fix(gateway): keep transcript helper private
* fix(paths): preserve public helper status
* refactor(channels): reuse registry normalizer
* refactor(agents): reuse agent core runtime facade
* refactor(auth): reuse locked profile upsert
* refactor(records): distinguish trap-safe guard
* refactor(migrations): distinguish sync directory helper
* test(plugins): drop stale duration alias expectations
* fix(channels): remove stale registry import
* chore(plugin-sdk): refresh helper API baseline
* fix(memory): keep renamed helpers private
* fix(plugins): keep registry state key private
* fix(plugin-sdk): tighten wildcard surface budget
* chore(plugin-sdk): refresh rebased helper API baseline
2026-07-13 03:22:00 -07:00
Peter Steinberger
31425b50a8
test(worker): add cloud worker fault injection gate ( #105921 )
2026-07-13 03:17:53 -07:00
Peter Steinberger
a2da4700be
refactor: consolidate remaining bounded concurrency ( #106265 )
2026-07-13 03:16:28 -07:00
Vincent Koc
e474ba38e8
fix(sqlite): serialize offline maintenance with gateway ( #106210 )
2026-07-13 18:15:32 +08:00
Peter Steinberger
6bb85f177f
feat(onepassword): optional 1Password secrets broker plugin ( #106133 )
...
* feat(onepassword): add optional 1Password secrets broker plugin
Curated slug registry with per-item auto/approve/deny policy, plugin-approval
gating with expiring allow-always grants, SQLite audit history, onepassword
status/audit CLI, and a single-attempt op client (--cache=false, minimal env).
Closes #105924
* docs(plugins): refresh generated inventory count after rebase
* fix(onepassword): scope grants and field reads
* fix(onepassword): bound grant retention
* fix(onepassword): satisfy deadcode ratchet and hook allowlist contract
* fix(onepassword): honor live policy reloads
* refactor(onepassword): trim private exports
* test(onepassword): satisfy plugin boundaries
* test(onepassword): document temp directory boundary
2026-07-13 03:12:47 -07:00
Vincent Koc
5eb52493c7
refactor(config): remove dead session runtime exports ( #106197 )
2026-07-13 18:11:31 +08:00
xingzhou
c3cb1af93c
fix(transcripts): stop live capture when the agent run is canceled ( #104123 )
...
* fix(transcripts): stop live capture when the agent run is canceled
* fix(transcripts): preserve startup cleanup ownership
* fix(transcripts): keep runtime session type internal
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-13 03:11:25 -07:00
Peter Steinberger
7c9b8baa2b
refactor(gateway): consolidate TypeScript WebSocket clients ( #106113 )
...
* refactor(gateway): unify websocket clients
* fix(gateway): preserve adapter lifecycle behavior
* test(gateway): keep reconnect proof black-box
* chore(gateway): satisfy shared client lint
* refactor(gateway): keep protocol decisions internal
* refactor(gateway): preserve shared reconnect supervision
* test(gateway): use canonical browser barrel
* fix(gateway): resolve browser retry workspace source
* refactor(gateway): tighten shared protocol types
2026-07-13 03:08:21 -07:00
Peter Steinberger
9092e59a43
refactor(agents): trim sandbox test seams ( #106257 )
2026-07-13 02:58:06 -07:00
Peter Steinberger
9ea4b167fa
refactor(deadcode): trim channel auth exports ( #106247 )
2026-07-13 02:45:34 -07:00
RickLin
21c377873d
fix(agents): classify account-restricted model 400s as model_not_found ( #104878 )
...
* fix(agents): classify account-restricted model 400s as model_not_found
OpenAI-backed runtimes reject plan/account-restricted models with HTTP
400 invalid_request_error ("The '<model>' model is not supported when
using Codex with a ChatGPT account."). Without a model_not_found match
the ambiguous-400 branch collapses this into a format failure, so users
get the generic retry//new copy for a config-only problem (#104490 ).
The 'when using' qualifier keeps capability rejections ("not supported
for tool calling") out of the class, preserving the #97611 contract.
Fixes #104490
* fix(agents): narrow account model rejection match
---------
Co-authored-by: Altay <altay@hey.com >
2026-07-13 12:44:40 +03:00
zhangqueping
87e2bafe00
fix(config): clear snapshot marker on transient read error so future updates retry ( #106105 )
...
* fix(config): clear snapshot marker on transient read error so future updates retry
The pre-update config snapshot marks a config path as snapshotted
before attempting the I/O. If readFile or writeFile threw a transient
error (e.g. disk space exhaustion, file locking), the catch block kept
the in-memory marker intact, permanently blocking snapshot retries for
the lifetime of the process.
Clear the marker in the catch block so a subsequent update can attempt
the snapshot again.
Fixes #105431
* test(config): cover snapshot retry failures
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-13 02:34:51 -07:00
Peter Steinberger
6cd1133858
feat(cloud-workers): openclaw worker mode running the embedded loop on the box ( #105865 )
...
* feat(cloud-workers): add restricted worker runtime
* test(cloud-workers): cover worker runtime contracts
* docs(cloud-workers): document worker mode
* fix(worker): bound connection lifecycle
* fix(worker): serialize transcript flushes
* fix(worker): fail stop stale transcript bases
* fix(worker): degrade lossy live streaming
* test(worker): cover inference reconnect fencing
* refactor(worker): split RPC clients
* refactor(worker): split connection transport
* refactor(worker): split embedded runtime
* refactor(worker): narrow worker module exports
2026-07-13 02:34:31 -07:00
Peter Steinberger
843e3c7878
improve(gateway): speed up pristine plugin-heavy startup [AI] ( #106195 )
...
* perf(gateway): skip absent core startup migrations
* fix(gateway): revalidate recovered startup config
2026-07-13 02:32:24 -07:00
Peter Steinberger
938d41014f
feat(mobile): default pairing to full node access ( #105928 )
...
* feat(mobile): default pairing to full node access
* chore: leave release notes to release workflow
* refactor(mobile): bound pairing helpers
* chore(i18n): refresh mobile access inventory
* chore(ci): lower mobile pairing LOC baseline
* fix(mobile): complete pairing validation artifacts
* ci: remove stale transcript target export baseline
* fix(ios): wrap access upgrade guidance
* fix(ios): preserve localized access key
* fix(ci): dedupe read-only SQLite guardrail
* fix(mobile): secure full-access node setup
2026-07-13 02:30:45 -07:00
Peter Steinberger
8c9b034480
refactor(agents): trim sandbox export seams ( #106237 )
2026-07-13 02:25:42 -07:00
Peter Steinberger
4f287dd740
refactor(process): adopt Execa execution layer ( #105939 )
...
* refactor(process): adopt execa execution layer
* fix(process): preserve launch error semantics
* chore(process): ratchet exec size baseline
* fix(process): preserve Windows and error contracts
* chore(plugin-sdk): ratchet wildcard surface budget
* test(process): allow resolved Windows executable paths
* fix(process): preserve Windows shim completion
* test(process): isolate Execa mocks
* style(process): format Windows exec test
* style(process): apply Windows test formatting
* test(process): normalize Windows system path casing
* fix(process): harden execa edge handling
* test(tui): preserve ESM fixture semantics
* fix(process): preserve PATHEXT lookup contract
* fix(process): keep invocation type internal
2026-07-13 02:21:08 -07:00
Peter Steinberger
7da28f3704
fix(plugin-sdk): freeze directory compat exports ( #106222 )
2026-07-13 02:14:02 -07:00
Peter Steinberger
bafabba0df
fix(gateway): preserve Control UI turns across restarts ( #106151 )
...
* fix(gateway): preserve Control UI turns across restart
* perf(sessions): index restart recovery state
* fix(sessions): avoid replaying pre-admitted turns
* fix(sessions): index per-entry recovery status
* fix(sessions): guard restart failure notices
* fix(sessions): preserve terminal claims across admissions
* fix(sessions): retry failed recovery notices
* fix(sessions): harden restart retry ownership
* fix(gateway): tighten restart recovery typing
* fix(sessions): close restart recovery races
* refactor(sessions): split restart recovery ownership
* chore(sessions): clean restart recovery lint
* chore: drop release-owned changelog entry
* fix(gateway): satisfy restart recovery guards
* test(gateway): cover Control UI durable admission
2026-07-13 02:08:56 -07:00
Peter Steinberger
48e212a19a
refactor(agents): trim embedded runner exports ( #105855 )
...
* refactor(agents): trim embedded runner exports
* chore(deadcode): refresh export baseline
2026-07-13 02:07:28 -07:00
mushuiyu886
ed57c6cd88
fix(agents): honor claude-cli contextTokens setting ( #93198 )
...
* fix: honor claude-cli configured context tokens
* test: cover claude-cli native compaction budget
* test: cover ordinary claude-cli budget persistence
* test: migrate claude-cli budget fixtures to session accessor
* fix(agents): carry CLI provider into context budget
* fix(agents): guard optional CLI context metadata
* fix(agents): align Claude CLI native compaction budget
Co-authored-by: 杨浩宇0668001029 <yang.haoyu@xydigit.com >
* fix(agents): apply selected CLI context cap
Co-authored-by: 杨浩宇0668001029 <yang.haoyu@xydigit.com >
* fix(agents): preserve prepared CLI context budgets
Co-authored-by: 杨浩宇0668001029 <yang.haoyu@xydigit.com >
* fix(agents): resolve prepared CLI context ownership
Co-authored-by: 杨浩宇0668001029 <yang.haoyu@xydigit.com >
* test(agents): type CLI context budget cases
Co-authored-by: 杨浩宇0668001029 <yang.haoyu@xydigit.com >
---------
Co-authored-by: Peter Steinberger <steipete@gmail.com >
2026-07-13 01:58:44 -07:00
Peter Steinberger
1136757174
refactor: consolidate bounded concurrency on p-limit and p-map ( #106002 )
...
* refactor: adopt p-limit and p-map for bounded concurrency
* chore: normalize lockfile ordering
* fix: preserve memory host concurrency export
* refactor: keep media apply within size budget
* fix: drain memory concurrency before failure
* fix: satisfy memory concurrency guards
* chore: scope memory host dead-code checks
* chore: lower concurrency LOC baselines
* fix: preserve concurrency API surfaces
* chore: reconcile concurrency LOC baseline
* test: keep memory concurrency gate portable
* style: simplify concurrency drain
* ci: refresh deadcode export baseline
2026-07-13 01:53:28 -07:00
Peter Steinberger
83bf0379c9
refactor(channels): share plugin contract scaffolds ( #105838 )
...
* refactor(channels): share plugin contract scaffolds
* fix: preserve channel config hint metadata
* chore: refresh Plugin SDK API baseline
* ci: refresh plugin SDK surface budget
* fix(ci): allow read-only state database boundary
* fix(ci): dedupe read-only state database boundary
2026-07-13 01:51:32 -07:00
Peter Steinberger
a857c44300
refactor: extract chat abort handling from gateway handler ( #106094 )
...
* refactor(gateway): extract chat abort handling
* fix(gateway): keep abort helper types private
2026-07-13 01:41:13 -07:00
Peter Steinberger
c2da10585c
refactor(plugin-sdk): prune eligible deprecated exports ( #106010 )
...
* refactor(plugin-sdk): remove unshipped compatibility exports
* refactor(zalo): use typed outbound delivery results
* chore(plugin-sdk): ratchet deprecated surface budgets
* chore(changelog): defer release note to release automation
* fix(zalo): reject failed message adapter sends
* refactor(zalo): share typed send boundary
* chore(plugin-sdk): account for main deprecation drift
2026-07-13 01:39:38 -07:00
Pavan Kumar Gondhi
0d177c9b4d
fix: keep command cron jobs operator-scoped [AI] ( #106057 )
...
* fix: scope agent cron command access
* test: avoid secret-like cron fixture text
2026-07-13 14:08:04 +05:30
Peter Steinberger
65257bebdd
fix(gateway): lower superseded reload log severity ( #106165 )
2026-07-13 01:35:41 -07:00
Peter Steinberger
98e3f729bc
refactor: remove dead plugin loader exports ( #105937 )
...
* refactor(plugins): trim activation and contract exports
* test(plugins): restore fixture cleanup
* refactor(plugins): trim install and loader exports
* test(plugins): fully reset loader caches
* refactor(plugins): trim metadata and catalog exports
* test(plugins): preserve catalog trust coverage
* refactor(plugins): trim provider and plugin exports
* refactor(plugins): trim runtime and tool exports
* test(plugins): update dead-export consumers
* test(plugins): remove empty dead-export suites
* refactor(plugins): align exports with split registry
* refactor(plugins): trim drifted loader exports
* style(plugins): format test fixtures
* refactor(scripts): use supported plugin APIs
* refactor(plugins): finish dead export cleanup
* chore(deadcode): refresh export baseline
* test(cli): mock production memory state
* chore(deadcode): sync latest export baseline
* fix(tests): keep plugin fixtures inside core
* chore(deadcode): refresh rebased export baseline
* chore(deadcode): sync current ratchets
* fix(plugins): retain reserved slot invariant
* fix(plugins): preserve dead-export invariants
* test(plugins): use neutral catalog query fixture
* test(plugins): satisfy catalog lint
* test(plugins): preserve integrity drift coverage
* fix(ci): register skill experience live proof
2026-07-13 01:29:33 -07:00
Peter Steinberger
7ff41d8271
style(ci): format experience review imports
2026-07-13 04:17:46 -04:00
Peter Steinberger
a18da069c5
fix(ci): eliminate experience review gate failures
2026-07-13 04:08:00 -04:00
Peter Steinberger
26e05c1c56
ci: repair main gate drift from skills experience-review landing
2026-07-13 00:59:56 -07:00
juyaohuidt
78bfcd2c2e
fix(cli): preserve literal --update subcommand args ( #106144 )
...
Co-authored-by: xydt-juyaohui <xydt-juyaohui@users.noreply.github.com >
2026-07-13 00:53:59 -07:00
Peter Steinberger
02cbe66846
refactor: use built-in glob for package manifests ( #105951 )
...
* refactor: use built-in glob for package manifests
* docs: note built-in glob migration
* docs: defer dependency note to release process
2026-07-13 00:45:41 -07:00
Peter Steinberger
e2ec8283c4
refactor(deadcode): trim mid-size src exports ( #105888 )
...
* refactor(deadcode): trim auto-reply and CLI exports
* refactor(deadcode): trim cron and task exports
* refactor(deadcode): trim fleet and process exports
* test(deadcode): exercise live task and process seams
* test(fleet): cover stream redaction through owner module
* refactor(security): trim dead internal exports
* refactor(secrets): trim dead internal exports
* refactor(deadcode): trim remaining src exports
* refactor(deadcode): remove test-only runtime exports
* refactor(deadcode): trim pairing test exports
* refactor(deadcode): reconcile refreshed baseline
* test(auto-reply): deduplicate queue state imports
2026-07-13 00:42:56 -07:00
